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Method of Processing Serial Data, Serial Data Processor and Architecture 

Therefore 

Field of the Invention 

The invention relates generally to processor architectures and more specifically u> 
5 a flexible architecture for processing of serial data. 

Background of the Invention 

Before the advent of the Internet, corporate data networks typically consisted of 
dedicated telecommunications lines leased from a public telephone company. Since the 
hardware implementation of the data networks was the exclusive property of the 
10 telephone company, a regulated utility having an absolute monopoly on the medium, 

security was not much of a problem; the single provider was contractually obl igated to be 
secure, and die lack of access to the switching network from outside made it more or less 
resistant to external hacking and tampering. 

Today, more and more enterprises are discovering the value of the Internet which 
15 is currently more widely deployed than any other single computer network in the world 
and is therefore readily available for use by a multinational corporate network. Since it is 
also a consumer-level product, Internet access can usually be provided at much lower 
cost than the same service provided by dedicated telephone company network. Finally, 
the availability of the Internet to the end user makes it possible for individuals to easily 
20 access the corporate network from home, or other remote locations. 

The Internet however, is run by public companies, using open protocols, and in- 
band routing and control that is open to scrutiny. This environment makes it a fertile 
proving ground for hackers. Industrial espionage is a lucrative business today, and 
companies that do business on the Internet leave themselves open to attack unless they 
25 take precautions. 

Several standards exist today for privacy and strong authentication on the Internet. 
Privacy is accomplished through encryption/decryption. Typically, encryption/decryption 
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is performed based on algorithms which arc intended lo allow data transfer over an open 
channel between parties while maintaining the privacy of the message contents. This is 
accomplished by encrypting the data using an encryption key by the sender and 
decrypting it using a decryption key by the receiver. In symmetric key cryptography, the 
5 encryption and decryption keys are the same, whereas in public key cryptography the 
encryption and decryption keys are different. 

Types of Encryption Algorithms 

Encryption algorithms arc typically classified into public-key and secret key 
algorithms. In secret-key algorithms, keys are secret whereas in public-key algorithms, 
10 one of the keys is known to the general public. Block ciphers are representative of the 
secret-key cryptosystems in use today. A block cipher takes a block of data, for example 
32-1 28 bits, as input data and produces the same number of bits as output data. The 
encryption and decryption operations are performed using the key, having a length 
typically in the range of 56-128 bits. The encryption algorithm is designed such that it is 
1 5 very difficult to decrypt a message without knowing the exact value of the key. 



In addition to block ciphers, Internet security protocols also rely on public-key 
[fj based algorithms. A public key cryptosysiem such as the Rivest, Shamir, Adelman (RS A) 

cryptosystem described in U.S. Pat. No. 5,144,667 issued to Pogue and Rivest uses two 
keys, one of which is secret - private - and the other of which is publicly available. Once 
20 someone publishes a public key, anyone may send that person a secret message encrypted 
using that public key; however, decryption of the message can only be accomplished by 
use of the private key. The advantage of such public-key encryption is private keys arc 
not distributed to all parties of a conversation beforehand. In contrast, when symmetric 
encryption is used, multiple secret keys are generated, one for each party intended to 
25 receive a message, and each secret key is privately communicated. Attempting to 
distribute secret keys in a secure fashion results in a similar problem as that faced in 
sending the message using only secret-key encryption; this is typically referred to as the 
key distribution problem. 
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Key exchange is another application of public-key techniques. In a key exchange 
protocol, two parties can agree on a secret key even if their conversation is intercepted by 
a third party. The Diltie-Hellman exponential key exchange method, described in U.S. 
Pat. No. 4,200,770, is an example of such a protocol. 

5 Most public-key algorithms, such as RSA and Diffie-Hcllman key exchange, are 

based on modular exponentiation, which is the computation of cc* mod p. This expression 
means "multiply a by itself x times, divide the answer by p, and take the remainder." 
This is very computationally expensive to perform for the following reason; In order to 
perform this operation, many repealed multiplication operations and division operations 
10 are required. Techniques such as Montgomery's method, described in "Modular 

Multiplication Without Trial Division," from Mathematics of Computation, Vol. 44, No. 
O 170 of April 1985, can reduce the number of division operations required but do not 

overcome this overall computational expense. In addition, for present day encryption 
P systems the numbers used are very large (typically 1024 bits or more), so the multiply 

| 15 and divide instructions found in common CPUs cannot be used directly, instead, special 

algorithms that break down the large multiplication operations and division operations 
U Jo operations small enough to be performed on a CPU are used. These algorithms 

jl usually have a run time proportional to the square of the number of machine words 

if involved. These factors result in multiplication of large numbers being a very slow 

| 20 operation. For example, a Pentium® processor can perform a 32x32-bit multiply in 10 

clock cycles. A 2048-bit number can be represented in 64 32-bil words. A 2048x2048-bit 
multiply requires 64x64 separate 32x32-bit multiplication operations, which takes 40960 
clocks on the Pentium® processor assuming no pipeline processing is performed. An 
exponentiation with a 2048-bit exponent requires up to 4096 multiplication operations if 
25 done in the straightforward fashion, which requires about 1 67 million clock cycles. If the 
Pentium processor is running at 166 MHZ, the entire operation requires roughly one 
second. Of course, the division operations add further time to the overall computation 
times. Clearly, a common CPU such as a Pentium cannot expect to do key generation and 
exchange at any great rate. 
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Because public-key algorithms are so computationally intensive, they are 
typically not used to encrypt entire messages. Instead, private-key cryptosystems are used 
for message transfer. The private key used to encrypt the message, called the session key, 
is chosen at random and encrypted using a public key. The encrypted session key and the 

5 encrypted message are then sent to the other party. The other party uses its private key to 
decrypt the session key, and then the message is decrypted using the .session key. A 
different session key is used for each communication, so that if security of a session key 
is ever breached, only the one message encrypted therewith is accessible. This public- 
kcy/private-key method is also useful to protect continuous streams of data within 

10 communications, such as interactive terminal sessions that do not. terminate in normal 
operation or that continue for extended periods of time. Preferably in this case, the 
session key is periodically changed by repeating the key exchange technique. Again, 

«•: rr. 

; : ~ frequent changing of the session key limits the amount of data compromised when 

h *4 security of the session key is breached. 

fj 15 Prior Art 

I'll 

Q Network-level encryption devices, allowing access to corporate neLworks using a 

L software-based solution are experiencing widespread usage. Products typically perform 

j * encryption entirely in software. The software complexity and processor speed limit 

j'O throughput of such a system. Also, session key generation using public-key techniques is 

20 time consuming and is therefore undertaken only when necessary. Software does have 

advantages such as ease of modification and updating to encryption algorithms 

implemented thereby. 

Other available devices use a combination of hardware and software in order to 
provide encryption. For example, the Entrust Sentinel X.25 encryption product uses a 
25 DES(Data encryption standard) chip produced by AMD® to perform DES symmetric- 
key encryption. Hardware implementations of the DES algorithm are much faster than 
software implementations, since DES was designed for efficient implementation in 
hardware and dedicated hardware solutions are known to be more efficient. A 
transposition that takes many central processing unit (CPU) instructions on a general 
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purpose processor in execution of software are done using parallel special-purpose 
lookup tables. 

The Sentinel also makes use of a Motorola DSP56000® processor to perform 
public-key operations. When designed, support of single-cycle multiplication by the 
digital signal processor (DSP) made this processor significantly faster than regular 
complex instruction set computers (CISC) microprocessors. 

Most hardware encryption devices are severely limited in the number ol 
algorithms that they support. For example, the AMD chip used in the Sentinel performs 
only DES. More recent devices from Iii/Fn can perform DES and RC4. However, other 
standard algorithms such as RC5 sand IDEA require use of another product. 

It would be advantageous to provide a flexible processor architecture for 
supporting encryption and other processing of data within a data stream. 

Object of the Invention 

In order to overcome these and other limitations of the prior art it is an object of 
1 5 the invention to provide a flexible processor architecture for supporting encryption and 
other processing of data within a data stream. 

Summary of the Invention 

In accordance with the invention there is provided a data processor for processing 
data comprising an input port for receiving packets of data; at least a port for 

20 communication with each of a plurality of processors; a first processor in communication 
with the at least a port and for processing received data to provide a header including a 
list of processes to perform on the packet of data and an ordering thereof, the header 
stored within a packet of data to which the header relates; a buffer for storing data 
received from the at least a port ; a buffer controller for determining based on the header 

25 within a packet a next processor of the plurality of processors to process said data packet 
and for providing said data packet to the at kast a port for provision to the next processor. 



5 



Sent By: Freedman & Associates; 613 274 7414; Dec-22-00 16:27; Page 16/43 



a. tZ 

Si 

u 

• i a. 
3 : I 

i'i ! 
W 




Pnlenl 

Doc. No. 47-11 US 

In accordance with another embodiment of the invention there is provided a data 
processor for processing data comprising a buffer for storing data; a plurality of special 
purpose processor?, each for processing data from within the buffer; a buffer controller in 
communication with each special purpose processor, for determining a next processor of 
5 the special purpose processors to process the data, and for providing the data to the 
determined next processor. 

In accordance with yet another embodiment there is provided a data processor for 
processing a packet of data comprising an addressing network; a plurality of special 

10 purpose processors, each for processing data received via the addressing network and for 
providing processed data to the addressing network, the addressing network 
interconnecting the plurality of special purpose processors; a first processor for providing 
data for use in directing a packet of data through the addressing network to a plurality of 
processors one after another in a predetermined order, the dau associated with the packet, 

1 5 wherein different packets are provided with different data for directing them differently 
through the addressing network and wherein each special purpose processor is for 
performing a function absent knowledge of the overall high level packet processing 
operation. 

20 In accordance with another aspect of the invention there is provided a method for 

processing stream data comprising receiving stream data including packets of data at an 
input port; processing received data packets to provide for each a header including a hsL 
of processes to perform on the packet and an ordering thereof, the header stored within 
the packet to which the header relates; providing the packet with the associated header to 
25 a buffer for storage; for each packet within the buffer: 

determining based on the header within the packet a next processor to process the 
packet; 

providing the packet to the determined next processor for processing, and 
receiving the processed packet from the processor and storing it in the buffer, the 
30 stored packet including one of an indication that processing by the next processor 

is complete and that no processing by the next processor is required; and, 
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when no further processes are indicated in a header of a packet, providing ihe packet in 
an output port. 

In accordance with yet another aspect of the invention there is provided an 
5 architecture for processing data comprising: 

a first processing element for receiving data and for formatting the data with a list 
of processes selected from available processes and an ordering thereof, the list of 
processes for being performed on the data; 

further processors for performing at least one process from the available 

10 processes; and, 

a routing memory for providing data to processors for performing the processes 
according to the ordering of the listed processes. 

Brief Description of the Drawings 

The invention will now be described with reference to the drawings in which like 
reference numerals refer to similar items and in which: 

Fig. 1 is a prior art block diagram of a pipeline processor Tor processing of data; 
Fig. 2 is a simplified flow diagram of a method for processing a packet using the 
pipeline processor of Fig. 1; 

Fig. 3 is, a simplified architectural diagram of an embodiment of the present 
invention; 

Fig. 4 is a simplified flow diagram of a method according to the invention; 
Fig. 5 is a simplified block diagram of a processor architecture according to the 
invention; 

Fig. 6 is a data structure diagram for a super packet; 

Fig. 7 is a simplified block diagram of a processor architecture according to the 
invention; 

Fig. 8 is a simplified block diagram of a processor architecture according to the 
invention; 
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Figs. 9a-9d is a data structure diagram for a super packet throughout a processing 
operation being performed thereon; and, 

Fig. 10 is a simplified block diagram of a processor array for use with an 
architecture according to the invention. 

5 Detailed Description of the Invention 

In data processing it is common that data is received in a format commonly 
referred to as packets. A packet is a small set of data including content data and 
classification data. The classification data includes one or more of format data, routing 
data, data type information, data classification, packet grouping data, and so forth. 

10 As each packet is received it is processed in accordance with its classification dara 

in order to act on the data in accordance with requirements relating to that classification 
of data. 

An example of packet classification and processing according to the prior art is 
now described with reference to Fig. 1 and Fig. 2. in Fig. 1 is shown a simplified block 
15 diagram of a serial pipeline processor. The processor is shown with a single pipeline path 
10 for processing data received serially at a data input port 12. The data is classified in a 
first stage of the pipeline 14. The classified data is then routed to an appropriate next 
pipeline stage through address lines 16. Examples of subsequent pipeline stages include 
cipher processing, routing processors, etc. 

20 Referring to Fig. 2, a simplified flow diagram of a method of packet processing 

for a packet received at input port 12 is shown. The packet is received. It is classified to 
determine a packet format. Here, the format is encrypted so the encrypted packei data is 
provided to a cipher processor for decryption. Once decrypted, the plain text is stored in a 
data buffer from which it is transferred to a destination process such as a communication 

25 port of a personal computer. 

Though the packet processor of Figs. 1 and 2 is efficient and makes use of parallel 
hardware based processors that are typically optimised for performing a specific task, the 
processor architecture is extremely inflexible. Each pipeline stage requires knowledge of 
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all immediately subsequent pipeline stage, in order to direct partially processed packets. 
Also, some pipeline stages are fully utilised while others are under utilised. Thus, 
efficiency is compromised. Finally, each packet follows a same path with some simple 
switching to ensure that packets are not processed when there is no need to do so. 

5 Referring to Fig. 3. a simplified architectural diagram of an embodiment of the 

present invention is shown. Here a data buffer 30 is shown disposed central to a packet 
processor. A master processor acts to format each packet in order to insert a header 
therein indicative of processes required for processing thai packet. The master processor 
is programmable and understands the processing of packets at a high level. Once the 

1 0 packet is reformatted, it is returned to the data buffer from which it is routed to a 

processing element for performing the first listed function. For example, in the example 
of Fig. 2, the first function is determining a formal of the packet. The packet, formal is 
determined and for each determined format a number of possible functions may be added 
or removed from the list within the header. For example, an encrypted packet may have 

15 the function cipher added to i t along with some form of key identi Her. The key idenli Her 
and the packet is then provided to a cipher processor from the buffer. Tn the cipher 
processor the packet is decrypted and the decrypted packet is returned to the buffer. The 
buffer continues to provide the packet to processor? as long as further functions remain 
within the header. When the header is empty, the packet is transferred to an output port 

20 for storage, for example in a received data buffer. Alternatively, a last function indicates 
the provision of the data to a data output pori. 

Because of the central data buffer of Fig. 3, the number and type of processors is 
easily varied, upgraded, expanded and so forth. Each time a new function is supported, 
the master processor is reprogrammcd to know of the new function and appropriate 
25 packets for which to 1 ist the process. 

Advantageously, only the master processor inserts functions within a header. As 
such, only the master processor needs to capture data relating to packet processing and 
only the master processor requires reprogramrning when the processing method or 
capabilities arc changed. 
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Referring 10 fig. 4, a simplified flow diagram of a method according to the 
invention is shown. Here, a packet is received. The master processor inserts a header 
indicative of classification, cipher processing, combining packets, and providing the 
combined data to the data output port. The buffer then receives the formatted packet and 

5 provides it to a classification processor that strips out classification data within the packet 
and replaces it with a known classification code. The packet is then returned to the buffer. 
The returned packet has the classification step removed therefrom either by removing the 
function from the header or by indicating the function as completed. The classified packet 
is then provided to a processor for ciphering. The cipher processor decrypts the packet 

10 data and returns the clear text packet to the buffer. The clear text packet is now provided 
to a combining processor that detects the packet classification information to determine il" 
it is part of a segmented larger packet and combines it with those segments of the larger 
packet that arc already in the combiner. When the larger packet is complete, it is returned 
to the buffer and then provided to the output data port. 



15 As is clear to one of skill in the art, the use of such an architecture greatly 

facilitates updating the processor capabilities, programming, and power. For example, a 
new cipher processor is easily added. The new resource is identified to the buffer as a 
cipher processor to allow the buffer to send packets having a cipher function required to 
I'D the new processor. Similarly, a classification processor can be upgraded or changed 

20 without effecting the processor. 



Also, the core processor according to the inventive architecture comprises a buffer 
and a master processor. The master processor is programmable to allow for upgradable 
and flexible packet processing. The buffer is capable of recognising and interfacing with 
a plurality of different dedicated processors. Of course, when desired, the dedicated 
25 processors are included within a same integrated processor. 

Referring to Fig. 5. a simplified architecmral diagram of a processor according to 
the invention is shown. A super packet buffer 51 is in communication with a plurality of 
data elements 52. The data elements 52 are for providing data to the super packet buffer 
5 1 and for receiving data from the super packet buffer 5 1 . Though the data element D 1 is 
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shown for providing andlhe data element D2 is shown Reiving data, data elements 52 
optionally support bidirectional communication with tile super packet buffer (SPB) 5 1 . 

The SPB is also in communication with a plurality of processors. Processors 53 
provide data processing including determining further processing required for a data 
packet. Processors 54 tire referred to as client processo^ and perform daia processing on 
packets that are received; Typically client processors 5|t| are dedicated to a single form of 
processing that is self contained and can be performed jon a packet in isolation. Cipher 
processing is one such process. Thus, a DES encryption engine typically forms a client 
processor for receiving data, for encrypting the data, ai|d for returning the encrypted data 
io the SPB. 
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Each communication port is typically control lep- 
within the SPB 51. For example, a driver process for a 
typically strip the header from a packet and provide 
processor along with key data in the form of a key or 
processor then processes the data and returns the 
which reinserts the header data, indicates the DES processing 
the packet back to the SPB 51. The use of driver precises 
proprietary processing elements - legacy processors - 
The use of driver processes also allows for system 



Referring to Fig.: 6, an exemplary super packet 
packet comprises a header, an ordered list of operation 
key data, and packet data. The header provides data u> 
and for tracking of same. Optionally, the header also 
use in monitoring performance, debugging, security 



log is useful. 



The control entries include a list of processes 
within the data buffer, these processes are generally 
the super packet buffer routes the super packet to any 
for performing said function. Some functions require 



by a driver process in execution 
DES encryption engine would 
data to be encrypted by the 
a key identifier. The DES 
processed data to ihe driver process 
as completed, and passes 
;s allows for use of non- 
fpr performing dedicated tasks, 
maintainability and upgradabiiity. 



jdata structure is shown. The super 
Is, daLa relating lo the operations, 

for identifying ihe super packet 
includes auditing information for 
audits, and other functions wherein a 



wed 



functions - required for the data 
listed in a generic fashion such that 
pf a number of available processors 
<tata. which is stored either 
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following each function identifier or in a separate set o 
example, a cipher processor may require an indication 
perform. Key data is stored in a subsequent set of field 
identifier instead of storing within the actual super pacjeet 
processed is included within the super packet. 



fields within a super packet. For 

which of encrypt/decrypt u> 
and typically identifies keys by 
s. Finally, the data to be 



Referring to Fig. 7, an architectural diagram of 
invention is shown. Here, a resource manager 71 main 
availability and so forth while agents 72 in execution 
operate to provide super packets to processors 75 in 
specific agents 73 act as pan of the driver process and 
determine data that will be suitably processed by the c 
determined, the remainder of the driver process 74 act; 
the client 75. 



another embodiment of the 
ains information on resource 
^ithin the super packet buffer 5 1 
accordance with their headers. ClienL 
:bmmunicatc with the agents 72 to 
tent 75. Once the client 75 is 
to format the data for receipt by 
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Referring to Fig. 8, a simplified architectural 
supporting Internet protocol security (IPSEC) proces 
reaching a processor having an architecture according 
9a-9d. The data element 81 performs ingress processing 
data in the form of a super packet of data to the super 
of data includes a header indicative of a single process 
for processing the data packet. The super packet is 
where it is converted into a super packet more indicati 
IPSEC server 82 is the only processor that has knowlefigi 
performed on each incoming data packet. All other 
function absent knowledge of how it fits into the global; 



The super packet is returned to the super pack< t 
processor 82. Once there, the super packet is provided 
header manipulation. The data within the data buffer i 
information and encapsulated security payload (ESP) 
process, control 2, is then marked as performed and 



Patent 



d agram of a processor for use in 
is shown. The process of data 
to the invention is shown in Figs. 

of data prior to providing the 
)kket buffer 51. The super packet 
^ that of the .server processor 82 
liprovided to the IPSEC server 82 
if/e of correct processing. The 
e of the overall process being 
perform their single 
i scheme. 



processors 



ibuffer 51 from the server 
tio the client processor 83 for IP 
i shown (Fig. 9b) with TP header 
leader information therein. The 
super packet is returned to the 
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super packet buffer 51. The next process is that process 
Encryption. Client 84 provides this functionality. The 
84 where, as shown in Fig. 9b encryption is performed jahd 
marked as having been performed. The next function 
Authentication. Client 85 performs this function. The 
client 85 where, as shown in Fig. 9c, Hashed Message 
added to the data within the buffer. The super packet i i 
buffer 51 once the function is marked as having been ^formed 
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indicated by control 3, 3DES 
sjjper packet is provided to client 
the function control 3 is 
be performed is HMAC96-MD5 
super packet is provided to the 
Authentication Code (HMAC) is 
Returned to the super packet 



The next function is control 5, which requires 
client 83 is capable of performing this function as well 
super packet is provided to the clieat 83 where the data 
9c. Once again the function control 5 is marked as hi 
packet is returned to the super packet buffer. Finally, 
egress processing performed by data element 86 and 
Fig. 9d. The super packet is stripped of its header leav ; 
communication. Optionally, the stripped header i 
use in real-time monitoring of performance and logging 
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As is evident to those of skill in the art, only 
relating to the overall process. Replacement of the cipher 
version of the cipher processor has virtually no impact 
system. Though the server 82 needs to know steps 
steps are high level and the server 82 need not 
Header manipulation or HMAC. Advantageously, ins 
a new client processor is simply added to the system to 
processor for a single task. 




IpSEC Header Manipulation. The 
is the function of control 2. The 
is reformatted as shown in Fig. 
g been performed and the super 
remaining function relates to 
results of which arc shown in 
rig a processed packet of data for 
information is provided to the server for 
of performance data. 



avin 



lie 



ttd 



server is provided with data 
er processor client 84 with a new 
on the overall architecture or the 
for tarrying out the process, these 
undcrstjahd anything relating ro 3DES, TP 
of replacing a client processor 
provide more than one client 



t^ad 



Though the architecture is described with refeijehce 
entire processor architecture may be implemented 
Preferably, the integrated circuit provides an interface 
future dedicated modules and application specific datt 



to a modular embodiment, the 
witjiin a single integrated circuit. 

for external processors to allow for 
processing client modules. 
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Of course, when a single group of processing ft actions is performed sufficiently 
many times in a same order, it is preferable to group th >se functions into a single client 
processor. For example, encryption is a plurality of dift ejrent functions thai are grouped. 
When an amount of 1PSEC packet processing required ii equivalent to the entire 
throughput of each client processor required, an IPSEC j 
same functional elements arranged in a pipeline is pref *ably used as a client processor lo 
the super packet buffer. In this way, much of the SPB c yerhcad is eliminated. Of course, 
the flexibility to use the client processors for other processing operations is lost so, when 
resource usage is less than a maximum resource usage, 
more flexible architecture. 



Alternatively, a single pipeline processor is 
ports for providing access to the complete pipeline or 
forming part of the pipeline processor. Of course, such 
complexity to the pipeline processor and therefore is 
separate client processors or a dedicated function pi 



it is often preferable to maintain a 



provided with a plurality of input 

a single, underutilised, processor 
an embodiment adds significant 
considered less desirable than using 
pipeline processor as described above. 



In accordance with another embodiment of the invention as shown in Fig. 10 ? the 
server processor stores within the header switching inf Ration for use in switching the 
super packet within an array of processors. A packet is directed fro the server processor 
to a first processor for processing. The header and the racket data are separated so as to 
not affect processing of the data. When the data is processed, header data is provided to 
an output addressing switch and the super packet data 
pipelined fashion to a subsequent processing element, 
flexibility, expandability, functionality and so forth wtilc adding tot he overall hardware 
complexity. That said, the performance of such an embodiment is likely superior to the 
more flexible architecture described above and in many; applications the lack of flexibility 
and so forth is not considered a great disadvantage. 



s automatically routed in a pseudo 
Such an embodiment reduces 



Alternatively, since the super packet includes 
processes, it is possible to encode therein executable 
As such a general purpose processor is provided and 
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data relating to individual 
cpde for execution on the processor, 
vdhen functions outside the scope of 
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the special purpose client processors is required, execu' 
provided to the general puipose processor for proce^siijg 
only a pointer to the code is provided to reduce the ovi 



Huff sir 
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In accordance with the diagrams, the invention 
5 encryption functions wherein secret keys arc guardejd 
enhance overall system security. The super packeL 
modules as necessary to perform processing thereof 
stored within those modules. 

Numerous other embodiments may be envispgejd 
10 or scope of the invention. 



erall 



is particularly well suited to 
single function modules to 
directs packets to different 
ihout compromising secret keys 
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able code and the super packet is 
thereof. Further alternatively, 
super packet size. 



without deparung from the spirit 



